Configuration difference against root policy

Scholar

Configuration difference against root policy

Dear community,

 

is there a possibility to report configuration differences against root policy?

For example we have  set no scan exclusion on root policy. However on some policies below we have set exclusions. Is there a possibility to report these changes?

 

Thank you in advance!

1 ACCEPTED SOLUTION

Accepted Solutions
F-Secure

Re: Configuration difference against root policy

Hello joe1847,

 

If you know the setting and wish to check all domain values for it, try Show domain values in context menu.

If you wish to get full report, try Reporting - Inheritance report with recursive checkbox.  That will collect all overrides for all domains and hosts in your domain.

 

Alexander

View solution in original post

2 REPLIES 2
F-Secure

Re: Configuration difference against root policy

Hello joe1847,

 

If you know the setting and wish to check all domain values for it, try Show domain values in context menu.

If you wish to get full report, try Reporting - Inheritance report with recursive checkbox.  That will collect all overrides for all domains and hosts in your domain.

 

Alexander

View solution in original post

Superuser

Re: Configuration difference against root policy

It is a very good idea to run such "inheritance reports regularly and in the result keep it small.

The changes you did on ROOT should always only be minimal (PMS-Communication) and not involve specific settings on exclusions. All these should be done in a subdomain (e.g. "Workstations").

 

As a general rule of thumb: Exlusions are only a temporary fix. Any installation that does not work propperly without an exclusion is considered a bug and should be reported to F-Secure Support for fixing.

(see earlier discusions on that topic)

 

M.

Matthias
----------
perComp is a Platinum Partner of F-Secure since 1994. Any advice or help given by me in this forum is voluntarily and to my best knowledge based on working with the products since 1997. Direct contact for customers please check our homepage http://www.percomp.de